CVE-2003-1367

N/A Unknown

Published: December 31, 2003 Modified: April 16, 2026

Description

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://securityreason.com/securityalert/3235

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/310113

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6761

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243

Source: cve@mitre.org

http://securityreason.com/securityalert/3235

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/310113

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/6761

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243

Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.3%

57th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-16

Affected Vendors

great_circle_associates

Related CVEs